Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
File:                     SFGWc90KnPV4lVIK83wqgYPc4Wg.cer (raw, json)
Hash identifier:          9RMujUhJKXMU4vTX5pp627kNw8K4VayHCeE3qrhirtI=
Subject key identifier:   48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       01941F8C927AA1E2C71E0A9A3B49E52E21F0
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 01:48:13 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 209843
                          IP: 193.202.0.0/24
                          IP: 2a10:2e00::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:92:7a:a1:e2:c7:1e:0a:9a:3b:49:e5:2e:21:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 01:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=48519673dd0a9cf57895520af37c2a8183dce168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:87:58:ae:7c:f9:b4:b2:bb:99:e9:26:d0:
                    1f:04:8a:38:b5:eb:9b:19:ea:e4:a4:ff:fc:53:bc:
                    f0:73:64:93:73:67:e5:73:3d:95:4b:c1:30:9c:7f:
                    ce:ad:09:7a:bd:1e:de:06:b7:1d:96:c7:06:50:ca:
                    6a:97:bf:f9:0f:72:50:f5:fe:a7:71:80:f0:fd:6a:
                    e5:0a:3e:89:2f:33:9e:2a:79:95:a3:a6:1e:44:7a:
                    9f:ca:7e:a7:5f:b6:3a:c5:a9:3b:5d:7f:3b:ac:4c:
                    99:45:ae:cb:0b:e1:16:ef:8f:ca:52:be:93:4a:d8:
                    29:00:f1:d1:a4:60:25:25:3a:82:44:b3:1a:df:9b:
                    cc:a2:de:a5:7e:eb:e3:cb:e7:f2:2e:32:bd:fb:e1:
                    af:87:6a:01:c4:c8:30:6a:e7:be:26:6f:5f:50:30:
                    40:8b:9b:2b:99:39:8f:e6:42:97:c3:f1:a6:59:a7:
                    39:45:57:de:64:fe:e4:fa:cb:eb:fe:29:11:cd:05:
                    64:43:ec:66:1a:92:c8:90:37:da:88:70:37:47:c1:
                    57:ef:5e:86:55:5e:36:6d:55:9f:19:2d:0d:27:6b:
                    47:7b:40:4c:10:f9:54:b1:d4:6e:28:e2:a0:43:8f:
                    6f:ee:d3:ba:e7:03:8e:d8:a6:58:14:76:0c:b2:5e:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.202.0.0/24
                IPv6:
                  2a10:2e00::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209843

    Signature Algorithm: sha256WithRSAEncryption
         8f:31:78:db:18:0f:f6:20:01:91:fd:83:d6:cd:57:da:82:66:
         03:9b:d1:aa:1f:ec:32:cf:a7:ea:2f:56:38:4a:21:ef:23:1b:
         58:b3:0e:c2:59:73:19:a8:b3:ab:4a:78:96:10:f7:32:2c:24:
         85:48:a0:ac:dd:45:e9:4a:c9:98:1e:4e:2c:19:9c:07:e1:60:
         1e:cf:3c:5e:04:ab:e9:46:c5:8c:28:47:4f:df:d1:8e:00:ad:
         57:f5:97:b1:07:6f:0c:e7:e1:36:ee:4d:0a:98:c8:86:78:19:
         fe:b8:66:72:a1:02:10:d3:10:a2:76:3a:0a:36:76:ab:c4:34:
         b7:97:48:9c:48:f8:49:43:9f:20:9f:f8:85:42:8d:64:5c:2b:
         4c:58:2c:99:75:5f:fc:a6:d2:50:f8:22:c8:7b:7b:64:7c:4c:
         a3:ff:70:ac:34:d8:dc:54:2f:df:4b:2b:b5:97:ac:f0:dd:bb:
         92:7f:00:88:0c:49:dc:9d:57:3f:9c:aa:43:d5:75:e3:3e:41:
         85:0d:51:83:a4:f1:4d:10:5b:4e:47:70:67:11:72:f6:52:d3:
         49:ea:77:ca:52:bd:2b:87:35:3a:88:e9:37:c5:79:b3:23:0a:
         75:12:84:2e:d3:55:55:13:8b:21:ba:3c:69:44:67:77:40:1e:
         a6:92:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----